diff --git a/apps/emqx_connector/src/emqx_connector_ssl.erl b/apps/emqx_connector/src/emqx_connector_ssl.erl
index 01f614e2e..43fa1eca4 100644
--- a/apps/emqx_connector/src/emqx_connector_ssl.erl
+++ b/apps/emqx_connector/src/emqx_connector_ssl.erl
@@ -55,7 +55,10 @@ map_bad_ssl_error(#{pem_check := invalid_pem} = TLSLibError) ->
         kind => validation_error,
         reason => <<"bad_ssl_config">>,
         bad_fields => Paths,
-        file_read_error => Reason
+        details => emqx_utils:format(
+            "Failed to access certificate / key file: ~s",
+            [emqx_utils:explain_posix(Reason)]
+        )
     };
 map_bad_ssl_error(#{which_options := Paths, reason := Reason}) ->
     #{
diff --git a/apps/emqx_connector/test/emqx_connector_api_SUITE.erl b/apps/emqx_connector/test/emqx_connector_api_SUITE.erl
index d1304b9d9..7c7bc432c 100644
--- a/apps/emqx_connector/test/emqx_connector_api_SUITE.erl
+++ b/apps/emqx_connector/test/emqx_connector_api_SUITE.erl
@@ -738,7 +738,8 @@ t_create_with_bad_tls_files(Config) ->
                 #{
                     <<"kind">> := <<"validation_error">>,
                     <<"reason">> := <<"bad_ssl_config">>,
-                    <<"file_read_error">> := <<"enoent">>,
+                    <<"details">> :=
+                        <<"Failed to access certificate / key file: No such file or directory">>,
                     <<"bad_fields">> := [[<<"cacertfile">>]]
                 },
                 json(Msg0)
diff --git a/apps/emqx_ft/test/emqx_ft_conf_SUITE.erl b/apps/emqx_ft/test/emqx_ft_conf_SUITE.erl
index afbad757a..98068be58 100644
--- a/apps/emqx_ft/test/emqx_ft_conf_SUITE.erl
+++ b/apps/emqx_ft/test/emqx_ft_conf_SUITE.erl
@@ -238,7 +238,7 @@ t_persist_ssl_certfiles(Config) ->
         list_ssl_certfiles(Config)
     ),
     ?assertMatch(
-        {error, {pre_config_update, _, {bad_ssl_config, #{}}}},
+        {error, {pre_config_update, _, #{reason := <<"bad_ssl_config">>}}},
         emqx_ft_conf:update(
             mk_storage(true, #{
                 <<"s3">> => mk_s3_config(#{